aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-m-z/yelp.profile
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/profile-m-z/yelp.profile
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/profile-m-z/yelp.profile')
-rw-r--r--etc/profile-m-z/yelp.profile57
1 files changed, 57 insertions, 0 deletions
diff --git a/etc/profile-m-z/yelp.profile b/etc/profile-m-z/yelp.profile
new file mode 100644
index 000000000..7053f98e8
--- /dev/null
+++ b/etc/profile-m-z/yelp.profile
@@ -0,0 +1,57 @@
1# Firejail profile for yelp
2# Description: Help browser for the GNOME desktop
3# This file is overwritten after every install/update
4# Persistent local customizations
5include yelp.local
6# Persistent global definitions
7include globals.local
8
9noblacklist ${HOME}/.config/yelp
10
11include disable-common.inc
12include disable-devel.inc
13include disable-exec.inc
14include disable-interpreters.inc
15include disable-passwdmgr.inc
16include disable-programs.inc
17include disable-xdg.inc
18
19mkdir ${HOME}/.config/yelp
20whitelist ${HOME}/.config/yelp
21whitelist /usr/share/doc
22whitelist /usr/share/help
23whitelist /usr/share/yelp
24whitelist /usr/share/yelp-xsl
25include whitelist-common.inc
26include whitelist-runuser-common.inc
27include whitelist-usr-share-common.inc
28include whitelist-var-common.inc
29
30apparmor
31caps.drop all
32net none
33nodvd
34nogroups
35nonewprivs
36noroot
37notv
38nou2f
39novideo
40protocol unix
41seccomp
42shell none
43tracelog
44
45disable-mnt
46private-bin yelp
47private-cache
48private-dev
49private-etc alsa,alternatives,asound.conf,crypto-policies,cups,dconf,drirc,fonts,gcrypt,gtk-3.0,machine-id,openal,os-release,pulse,sgml,xml
50private-tmp
51
52# read-only ${HOME} breaks some not necesarry featrues, comment it if
53# you need them or put 'ignore read-only ${HOME}' into your yelp.local.
54# broken features:
55# 1. yelp --editor-mode
56# 2. saving the window geometry
57read-only ${HOME}